General

  • Target
    c8702255a89a489a0e9dbad263a8f491038191c78a20f6cf57429af09b2c2dda.exe
  • Size 807KB
  • Sample221207-qfhrlsfa32
  • SHA256 c8702255a89a489a0e9dbad263a8f491038191c78a20f6cf57429af09b2c2dda
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • formbook

Version
  • 4.1

Campaign
  • g25e

Decoy
  • 2491254125.xyz

  • hookd.gay

  • uxmelange.com

  • startupvision3.com

  • evanwoosley-reed.com

  • uspalupdser.info

  • lx0599.com

  • grupoiaez.com

  • londonpapershop.com

  • cremas.store

  • risespec.com

  • olivierverdoyant.com

  • creatednow.com

  • epicureanhometreats.com

  • iqijp.com

  • vcraftboutique.com

  • furnaristudios.com

  • dealsgolf.com

  • djwoojs.com

  • boatslave.com

Targets

    • Target
      c8702255a89a489a0e9dbad263a8f491038191c78a20f6cf57429af09b2c2dda.exe
    • Size 807KB
    • SHA256 c8702255a89a489a0e9dbad263a8f491038191c78a20f6cf57429af09b2c2dda
    • MD5 SHA1 SHA512 SSDEEP
    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks